add attr_accessible in photos